Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft
File:                     1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft (raw, json)
Hash identifier:          qL5vp8Aldk272PJynKm8AenyBhNmFSx3jlDnLQQcHiA=
Subject key identifier:   53:F6:B7:96:C3:D4:C6:EA:08:F9:6B:2C:DA:C7:B3:05:3C:B5:93:07
Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
Certificate issuer:       /CN=fb987244611b5230536744b6a89f044f32f462ea
Certificate serial:       01A0DB041CE1E240E2D328169242D7055D57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft
Manifest number:          1A7E
Signing time:             Sat 26 Sep 2026 00:01:14 +0000
Manifest this update:     Sat 26 Sep 2026 00:01:14 +0000
Manifest next update:     Sun 27 Sep 2026 00:01:14 +0000
Files and hashes:         1: 0cWx-DBEWXofQGq4uONjR9-bH4Y.roa (hash: pTkOoFQAT359monWmVl8M1BT8bJvgYKuEr63L6+DXH0=)
                          2: 1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl (hash: EjESTzuh8Inu2kMShFHQKRBj+JJ50qfZF3CB4dTdacw=)
                          3: AoOT9bGlJWd-TIRNHpKTWvzqPSY.roa (hash: Zi71VPuABO0kIOBrih/loFOATBl1klL+p6nG7AFF/d0=)
                          4: Bcd1BhwhrloaAtNtyP-2iXTXB5A.roa (hash: dwpLC5kz/iKWj1XEBoyZJZ2yN/0XmLy1ykd/NJpK0sU=)
                          5: EUgnWUs3CsfaZnj_hnNyvxreJoQ.roa (hash: pJY6CLyIZmy66AbMBmwM31A1sACoy25h4xx0+iPYYKE=)
                          6: MP5IdtDl7YEwuRNByyv8kDyAVco.roa (hash: vqDoHpH/1+pER1chx+gV6UvPLCxswhMzI5LmhtQHsu4=)
                          7: TJn7hrwQDusGI6b-JvzCy0ryuuI.roa (hash: jB76SwGUuXPBEx6T4Yw/Gggaft9shy0ZMidb4G0i9nM=)
                          8: UNIm3YXiMDOMkRxhMMlo6vVHArk.roa (hash: Tj2pYqF/A8kH66w2NIt64SQxibERr8EqlG3Fz5Bjgag=)
                          9: UX6g7KL9WRWy9Rrda_z2jmHwIg0.roa (hash: NgIQIWjEkGD0w0vEE9BTQb05Jn1iZvBqKIdoPQLt1R0=)
                          10: XUiE35ZJ3I6RBM2rDx0ESiNgluI.roa (hash: k03+qzTCxQ7lrjUzBfLF9RxlBcgnBj56L5MGzoB6xFA=)
                          11: _6SUA7PKYEVFBTaDAhE_A7MmF48.roa (hash: uJO3tMs1LSBIuJd7osQRiXv584cj5QanzKyRrYPze+w=)
                          12: cOTwaK6RSeeGqDttEyYUstwdoCE.roa (hash: alEZzagowBG75tk1HZniA5+5QPNp5iyxbE6HUR50PHQ=)
                          13: fJWzhiz6ayYsqM8kzsREYtIJBgI.roa (hash: N8Chz/wqQxJEwp3lnnRBhU8gdawDyJefdia645ECTwg=)
                          14: gfMRF0Nj1ChxrdQTcKCsvqZqzRA.roa (hash: VFwJmY7TYTF5JsUpp282lqGtLaHhhYMOSpBJGNGXiME=)
                          15: q7ctECBBEGOXl7uVauozGHraScs.roa (hash: gH9pmibDk4Ofnm2E38XD3fGrNK+1ocC6xSl5pld1ojw=)
                          16: qyuH8NgRhRZdTsIxcPjney8uG5Y.roa (hash: n0uUMyMPIGkKTSZ3n9g1M0rkf82uD6ttedakSVtd8tQ=)
                          17: vhCKx6YE6UZfYQ_y2if0T0sJx9A.roa (hash: 4GxEPZps/hQabeBQl+bTu8j92zD3sd9eABLT3Mr/M3g=)
                          18: x0r6XLUbiGOM5wv_gPZskGbu2oc.roa (hash: cdp8ZKRLyyEX1Hh8O5VsarJhdWV3a3wqBRxkXALsMf0=)
                          19: z1vIHaPgOEf1CFFXxVhQ7UIS68w.roa (hash: rFdz4/+higPiFTrvJsOTs2dDOqXP1ja44+BB/HAKISI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 00:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:04:1c:e1:e2:40:e2:d3:28:16:92:42:d7:05:5d:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea
        Validity
            Not Before: Sep 26 00:01:14 2026 GMT
            Not After : Sep 27 00:01:14 2026 GMT
        Subject: CN=53f6b796c3d4c6ea08f96b2cdac7b3053cb59307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:dc:10:86:85:99:ef:0c:c9:30:87:8f:41:9e:
                    43:a8:bd:64:78:bb:3c:8e:73:cd:84:fe:1b:42:1d:
                    7e:1a:89:7c:8f:3e:ac:b8:de:1d:51:38:47:5b:08:
                    07:08:2c:e2:50:08:04:dc:52:47:4a:09:d4:3b:8c:
                    b9:69:22:f1:14:54:20:4d:20:72:ab:5e:71:c1:99:
                    0b:1c:2d:33:dc:fe:4f:6d:44:73:eb:42:12:d3:c5:
                    e0:4e:bf:61:43:29:3b:89:76:74:05:a6:65:fa:fd:
                    3b:c8:3d:c6:3b:03:f5:9d:86:b2:68:f5:82:bf:63:
                    28:df:31:87:97:8d:af:65:1e:71:a6:dc:9c:71:ad:
                    85:03:d0:bb:01:f8:c4:6a:12:ed:1d:c1:a2:56:7e:
                    b2:76:61:a3:00:aa:73:c8:14:09:35:ee:7a:f0:d2:
                    8b:9f:01:4a:34:58:3d:4a:06:43:dd:ab:de:01:08:
                    27:62:ed:8a:65:6b:a8:f9:1c:4b:f1:bd:32:cd:df:
                    b3:26:d5:60:8c:84:b4:f2:0b:77:8e:5e:b9:e0:5f:
                    4d:05:74:44:1e:7a:d3:d5:fb:fe:8b:50:3c:71:f3:
                    6a:2f:1c:bf:03:f0:98:b8:22:eb:e5:68:3f:b0:c2:
                    58:d2:38:4c:8b:fe:7f:bc:75:8c:b4:7e:70:46:90:
                    69:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F6:B7:96:C3:D4:C6:EA:08:F9:6B:2C:DA:C7:B3:05:3C:B5:93:07
            X509v3 Authority Key Identifier:
                keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:e0:09:51:78:48:ee:e5:da:1f:5f:dd:fd:48:ba:5e:d0:66:
         bd:f7:7c:e2:92:1b:d5:1f:0e:17:50:ec:f2:b0:91:e9:69:af:
         c2:8c:1d:27:81:ad:c0:10:c6:65:c5:9e:9a:1c:24:5b:17:39:
         77:ff:95:b4:03:92:ae:2d:bd:6f:34:5b:d0:c4:2f:02:4d:8c:
         29:a2:d1:7b:52:5c:90:21:35:05:56:41:fe:c9:fa:c8:2a:af:
         55:08:e9:9e:c0:69:3d:9e:34:4d:48:1b:1e:fb:a5:6e:d0:f4:
         69:ed:14:4e:ec:ed:a7:6d:d8:1a:08:b2:f6:6c:70:39:29:64:
         99:0c:c1:91:85:4e:83:a7:3b:18:7b:2e:f5:a0:45:61:bf:9d:
         9f:89:56:e1:79:a3:85:c5:86:c6:db:d9:62:30:a7:6a:05:38:
         8f:bc:ca:a6:be:64:c0:4a:61:6b:e9:cf:b2:87:ec:35:a4:99:
         53:6e:77:9f:0f:12:69:73:e4:aa:1f:fb:1a:06:a5:b5:4f:55:
         78:65:d2:2f:f7:a0:5a:19:ad:bc:42:fa:df:54:7d:67:d8:50:
         d6:44:e9:93:bf:e9:76:d3:99:c1:47:6a:b7:7b:9e:b0:2c:15:
         dc:1b:81:42:33:9e:6a:2b:28:3f:7f:cc:0f:e1:84:ee:a1:bb:
         28:7c:75:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:43:30 2026 by rpki-client